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IN THE CLAIMS 

Please amend the claims as follows: 



1. (Currently Amended) A method comprising to verify configuration of a client acc e ss device 
requesting access to a network, th e m e thod including : 

performing, in a first service access provider, operations including, 

receiving an access request from a client access device, the access request 
requesting access to a network, wherein a user associated with the client access device is 
a subscriber of a second service access provider: 

establishing a communications link with the client access device to authenticate 
and authorize [[a]] the user associat e d with the cli e nt acc e ss d e vic e; 

receiving client device configuration data from the client access device over the 
communications link during an authentication and authorization exchange; 

transmitting the client device configuration data destined for the second service 
access provider, wherein the second service access provider is operable to proc e ssing 
process the client device configuration data[[;]] and selectively granting grant the client 
access device access to the network based upon the client device configuration dat a; and 

receiving an indication about whether the client access device is granted access to 
the network, the indication originating from the second service access provider. 

2. (Original) The method of claim 1, wherein processing the client device configuration data 
includes determining if the client device configuration data meets predetermined security 
requirements. 

3. (Original) The method of claim 2, wherein determining if the client device configuration data 
meets predetermined security requirements includes comparing the client device configuration 
data with reference configuration data. 
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4. (Currently Amended) The method of claim 2, wherein the second service access provider is 
further operable to which includ e s updating update the client device configuration data if the 
client device configuration data fails to meet the predetermined security requirements. 

5. (Original) The method of claim 4, wherein selectively granting the client access device 
access to the network includes, denying access to the network if the client device configuration 
data is not updated. 

6. (Original) The method of claim 1, wherein the establishing of the communications link with 
the client access device includes, communicating an agent to the client access device, the agent 
operable to identify the client device configuration data and to communicate the client device 
configuration data to a server of the network. 

7. (Original) The method of claim 6, which includes, if after the processing of the client device 
configuration data the client device configuration data requires an update, using the agent to 
update the client access device with updated configuration data. 

8. (Original) The method of claim 7, which includes, after updating the client access device, 
receiving an update result indicator from the agent to confirm that the configuration of the client 
access device has been updated. 

9. (Original) The method of claim 1, wherein the establishing of the communications link with 
the client access device includes communicating a command set, which includes at least one 
command, to the client access device, the command set operable to identify the client device 
configuration data and to communicate the client device configuration data to a server of the 
network. 

10. (Original) The method of claim 9, which includes, if after the processing of the client device 
configuration data the client device configuration data requires an update, using the command set 
to update the client access device with updated configuration data. 

11. (Original) The method of claim 10, wherein the command set further includes a first 
command set to identify and communicate the client device configuration data to the server, and 
a second command set to update the client access device with the updated configuration data. 
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12. (Original) The method of claim 10, which includes, after updating the client access device, 
receiving an update result indicator from the client access device to confirm that the 
configuration of the client access device has been updated. 

13. (Currently Amended) The method of claim 1, which includes, the operations further 
including, after establishing communications with the client access device, transmitting 
authentication information to the second service access provider, the second service access 
provider further operable to authenticate auth e nticating a the use r associat e d with the client 
acc e ss device . 

14. (Original) The method of claim 13, wherein authenticating the user includes verifying user 
login information associated with the user attempting access to the network. 

15. (Original) The method of claim 1, wherein the client device configuration data includes at 
least one of virus definition data, firewall configuration data, and operating system configuration 
data. 

16. (Currently Amended) A system to verify configuration data of a client access device 
requesting access to a network, the system including: 

a first n e twork service access provider s e rv e r , coupled to a network, to establish a 
communications link to the client access device to receive, from the client access device, 
authentication information for a user associated with the client access device to auth e nticate and 
authoriz e a user a s sociat e d with the client access device and to receive the cli e nt devic e 
configuration data from the client access device over the communications link during an 
authentication and authorization exchange; and 

at least one furth e r serv e r coupled to the network acc e ss serve r a second service access 
provider to receive the authentication information and the configuration data from the first 
service access provider, to process the configuration data A and to selectively grant the client 
access device access to the network based upon the r e c e iv e d cli e nt d e vic e configuration data. 

17. (Currently Amended) The system of claim 16, wherein the at l e ast on e further serv e r second 
service access provider includes a configuration server to process the client device configuration 
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data such that the configuration server determines if the client device configuration data meets 
predetermined security requirements. 

18. (Original) The system of claim 17, wherein the configuration server compares the client 
device configuration data with reference configuration data to determine if the client device 
configuration data meets predetermined security requirements. 

19. (Original) The system of claim 17, wherein the configuration server, after the client device 
configuration data is processed, updates the client device configuration data. 

20. (Original) The system of claim 19, wherein the configuration server denies network access 
to the client access device if the client device configuration data is not updated. 

21. (Currently Amended) The system of claim 17, wherein to establish the communications link 
with the client access device, the network access server second service access provider 
communicates an agent to the client access device, the agent operable to identify the client 
device configuration data and to communicate the client device configuration data to at least one 
of the n e twork acc e ss s e rver second service access provider and the configuration server. 

22. (Original) The system of claim 21, wherein if after the processing of the client device 
configuration data the client device configuration data requires an update, the configuration 
server being configurable to use the agent to update client device configuration data with updated 
configuration data. 

23. (Original) The system of claim 22, wherein after the agent updates the client access device, 
the configuration server receives an update result indicator from the agent to confirm that the 
configuration of the client device has been updated. 

24. (Currently Amended) The system of claim 17, wherein to establish the communications link 
with the client access device, the n e twork access server first service access provider 
communicates a command set to the client access device, the command set operable to identify 
the client device configuration data and to communicate the client device configuration data to at 
least one of the network access s e rver first service access provider and the configuration server. 

25. (Original) The system of claim 24, wherein if after the processing of the client device 
configuration data, the client device configuration data requires an update, the configuration 
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server is operable to further use the command set to update client device configuration data with 
updated configuration data. 

26. (Original) The system of claim 25, wherein after the configuration server updates the client 
access device, the configuration server receives an update result indicator from the client access 
device to confirm that the client configuration has been updated. 

27. (Original) The system of claim 24, wherein the command set further includes a first 
command set to identify and communicate the client device configuration data to the server, and 
a second command set to update the client access device with the updated configuration data. 

28. (Original) The system of claim 16, wherein the at least on e further s e rver second service 
access provider includes an authentication server to authenticate and authorize a user associated 
with the client access device. 

29. (Original) The system of claim 16, wherein the client device configuration data includes at 
least one of virus definition data, firewall configuration data, and operating system configuration 
data. 

30. (Currently Amended) A machine readable medium storing a set of instructions that, when 
executed by a machine, cause the machine to: 

perform, in a first service access provider, operations causing the machine to. 

receive an access request from a client access device, the access request 
requesting access to a network, wherein a user associated with the client access device is 
a subscriber of a second service access provider; 

establish a communications link with a client access device to authenticate and 
authorize [[a]] the user associated with the client access device; 

receive client device configuration data from the client access device over the 
communications link during an authentication and authorization exchange; 

transmit the client device configuration data destined for the second service 
access provider, wherein the second service access provider is operable to proc e ssing 
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process the client device configuration data [[;]] and to selectively grant the client access 
device access to the network based upon the client device configuration dat a; and 

receive an indication about whether the client access device is granted access to 
the network^ the indication originating from the second service access provider . 

3 1 . (Original) The machine readable medium of claim 30, wherein after the processing of the 
client device configuration data, the client device configuration data is updated with updated 
configuration data. 

32. (Currently Amended) A method to manage access to a network from a client access device, 
the method including comprising : 

requesting access to the networ k, the requesting involving a first service access provider 
and a second service access provider ; 

authenticating a user associated with the client access device in an authentication and 
authorization exchange , wherein the user is a subscriber of the second service access provider ; 

communicating client device configuration data to the second service access provider via 
the first service access provider a network acc e ss syst e m ; 

receiving a verification response from the second service access provider via the first 
service access provider network acc es s system ; and 

accessing the network if the user is authenticated and the verification response from the 
n e twork acc e ss syst e m secon d service access provider indicates acceptance of accepts the client 
device configuration dat a, accessing the network via the first service provider . 

33. (Currently Amended) The method of claim 32, wherein prior to receiving [[a]] the 
verification response, updated configuration data is received from the second service access 
provider via the first service access provider, the updated configuration data network acc e ss 
system to replace the client device configuration data. 

34. (Currently Amended) A machine readable medium storing a set of instructions that, when 
executed by a machine, cause the machine to: 
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request , from a first service access provider, access to a network , the requesting involving 
a first service access provider and a second service access provider ; 

authenticate and authorize a user associated with the cli e nt acc e ss d e vic e request in an 
authentication and authorization exchang e, wherein the user is a subscriber of the second service 
access provider ; 

communicate client device configuration data the second service access provider via the 
first service access provider a n e twork access system to a n e twork acc e ss system during th e 
auth e ntication and authorization exchange ; 

receive a verification response from the second service access provider via the first 
service access provider n e twork acc e ss syst e m ; and 

acc e ssing th e network if the user is authenticated and the verification response from the 
n e twork acc e ss syst e m second service access provider indicates acceptance of acc e pts the client 
device configuration dat a, access the network via the second service provider . 

35. (Currently Amended) The machine readable medium of claim 34, wherein prior to receiving 
a verification response, updated configuration data is received from the network acc e ss syst e m 
second service access provider during the authentication and authorization e xchang e to replace 
the client device configuration data. 

36. (Canceled) 



